Ben's notes

Linux, Unix, network, radio...

User Tools

Site Tools


generate_selinux_policy

Generate SELinux policy

Tested on CentOS 6.5

  • Install policycoreutils-python
    yum install policycoreutils-python
  • Create policy from audit log.
    cp /var/log/audit/audit.log /var/tmp
    cd /var/tmp
    audit2allow -M rsync < audit.log
  • Follow on screen directions.

If you need to edit the policy file

  • Edit the .te file.
  • Recompile the policy.
    make -f /usr/share/selinux/devel/Makefile
  • Reload the module.
    semodule -i rsync.pp
generate_selinux_policy.1402926365.txt.gz · Last modified: 2014/06/16 13:46 by admin